Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/22AB1A545CAF610816572F26872DE7E11F24C4BC.cer
File:                     22AB1A545CAF610816572F26872DE7E11F24C4BC.cer (raw, json)
Hash identifier:          RLigL7srUpo407saXDgrcHs2TuUcEGvdY4rhG8+X2HI=
Subject key identifier:   22:AB:1A:54:5C:AF:61:08:16:57:2F:26:87:2D:E7:E1:1F:24:C4:BC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6629BCF2ACC309D0A36EAF978A61AAE3479F4CCB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DcHVwdnpbXkKGmh2VJ88bKNc38687WMxsYKgcox19Geg/0/22AB1A545CAF610816572F26872DE7E11F24C4BC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DcHVwdnpbXkKGmh2VJ88bKNc38687WMxsYKgcox19Geg/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Jul 2024 18:48:11 +0000
Certificate not after:    Thu 03 Jul 2025 18:53:11 +0000
Subordinate resources:    AS: 271045
                          IP: 45.65.164.0/22
                          IP: 177.67.160.0/21
                          IP: 201.54.184.0/24
                          IP: 201.54.186.0/23
                          IP: 2804:756c::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:29:bc:f2:ac:c3:09:d0:a3:6e:af:97:8a:61:aa:e3:47:9f:4c:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul  4 18:48:11 2024 GMT
            Not After : Jul  3 18:53:11 2025 GMT
        Subject: CN=22AB1A545CAF610816572F26872DE7E11F24C4BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d8:80:21:44:f6:73:28:c6:a6:f4:48:b6:b8:
                    00:da:ef:77:06:cf:ea:07:79:9c:78:89:59:40:b0:
                    14:c1:65:7f:60:3b:45:73:52:e7:01:6f:f0:56:fa:
                    ec:1a:b2:0e:8c:6f:55:c5:77:0c:d7:a9:1a:5d:f7:
                    01:36:3a:02:56:4e:b6:5f:34:9f:ee:32:a7:be:39:
                    77:72:20:99:6d:fa:b4:55:36:9e:82:3c:e9:39:b5:
                    3c:cd:0d:f8:7f:90:62:31:e3:6c:af:99:9a:70:41:
                    56:9f:70:3d:28:1a:46:27:53:0b:16:db:a1:8b:9d:
                    2d:0b:37:1b:b4:50:56:08:da:5b:b0:8f:80:90:05:
                    0b:67:cb:c2:a0:56:46:79:72:93:3a:27:30:6a:1a:
                    cb:5e:6a:69:aa:cf:5f:85:20:8c:3f:cb:27:88:0d:
                    32:1a:3b:a4:bf:97:da:b9:09:ae:8f:5b:29:bb:60:
                    bc:a1:2d:72:bc:01:eb:03:f5:c2:7a:7d:75:aa:c1:
                    21:19:03:f8:a8:c5:0d:75:86:c8:f6:57:8e:3d:f8:
                    5f:83:89:40:d0:b6:80:dd:1f:ad:cc:2c:d2:e2:00:
                    50:0b:18:28:d9:fa:f3:32:09:5e:83:e0:f7:55:7e:
                    30:8d:01:22:3b:99:73:57:30:cf:49:13:af:69:8a:
                    d6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                22:AB:1A:54:5C:AF:61:08:16:57:2F:26:87:2D:E7:E1:1F:24:C4:BC
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DcHVwdnpbXkKGmh2VJ88bKNc38687WMxsYKgcox19Geg/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DcHVwdnpbXkKGmh2VJ88bKNc38687WMxsYKgcox19Geg/0/22AB1A545CAF610816572F26872DE7E11F24C4BC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.164.0/22
                  177.67.160.0/21
                  201.54.184.0/24
                  201.54.186.0/23
                IPv6:
                  2804:756c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271045

    Signature Algorithm: sha256WithRSAEncryption
         9f:0a:23:9b:1d:63:d1:f5:ef:09:fd:f6:f7:80:ee:39:8b:ef:
         8b:d7:19:22:ed:b1:83:c7:55:dd:86:0a:79:2a:a8:cd:79:25:
         ef:24:bb:1a:37:51:24:1c:65:74:14:20:f4:6a:c4:55:cd:26:
         ee:15:8e:27:a5:a7:fb:73:cd:32:60:47:60:80:8d:7c:45:b9:
         76:49:24:2e:b0:53:6c:e9:03:c4:c2:bc:8a:6f:73:07:bc:57:
         f3:af:6e:3e:33:e5:62:20:af:1c:a5:d4:0d:15:b2:6a:03:3a:
         15:b9:db:44:5c:de:97:d5:5a:8c:a7:b1:b7:c3:a9:15:39:7d:
         d7:68:69:c0:a0:6e:ea:6c:e2:fe:0d:88:71:42:2e:ca:4d:5b:
         1e:1b:29:d3:16:25:57:67:75:96:21:7b:2f:4f:8c:03:90:da:
         e6:67:18:b1:f2:e0:25:ae:e0:98:4b:17:6e:3c:03:cb:82:1a:
         94:8d:06:a5:b5:0e:a5:d7:65:26:f5:68:f0:f1:2b:23:1f:c8:
         97:d8:71:99:15:43:79:2d:77:92:81:9e:3f:95:98:06:09:b8:
         45:dd:85:0e:9d:7f:5b:eb:ea:80:16:98:b4:99:e2:71:b3:e1:
         40:f2:ee:27:82:fe:9b:07:fb:57:3a:74:52:fa:45:52:ad:bd:
         76:9c:9d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 06:36:46 2024 by rpki-client on console.sobornost.net